Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          cVxxMFcUwKBS1nw6j0GJMMmmr23iFcySL1j6QnnzTzI=
Subject key identifier:   A7:78:49:B0:E8:FD:99:7F:21:C7:8B:84:8F:C3:C2:D8:9D:CE:78:9D
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       019921B0D9B81B4F454CAB383DCD1C0F9133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          1675
Signing time:             Sun 07 Sep 2025 01:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:01 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: Yuv3Vw02GtwxM28osI+JIt0d/Ia88m2R5VRwQbPZADE=)
                          2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:d9:b8:1b:4f:45:4c:ab:38:3d:cd:1c:0f:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Sep  7 01:01:01 2025 GMT
            Not After : Sep  8 01:01:01 2025 GMT
        Subject: CN=a77849b0e8fd997f21c78b848fc3c2d89dce789d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:4e:18:2a:97:c0:c2:fb:2c:ad:c1:f9:95:
                    31:8a:10:8f:2d:fc:59:9c:f8:40:e4:16:82:04:cd:
                    a5:16:a8:da:e0:42:04:19:a0:c7:d7:27:5b:96:5e:
                    22:af:f9:44:e8:6a:e7:52:99:1c:2e:99:bc:74:9c:
                    3c:78:10:19:8d:99:c0:6a:6b:4c:19:4a:26:a6:b3:
                    47:10:04:eb:80:b5:aa:ba:93:e7:5b:b0:4c:21:ff:
                    ab:74:f2:f4:96:f3:4a:36:3b:5f:87:cb:c5:9b:e3:
                    88:36:18:bf:b2:0e:0a:8a:a1:07:51:b7:83:ff:bd:
                    cd:ce:d4:e8:ff:c3:ef:2d:61:7f:bf:9d:11:a6:36:
                    62:c8:ff:d7:51:30:23:32:3f:2d:8f:9b:07:0f:54:
                    69:ea:af:c4:6b:ac:b6:17:8b:51:a0:d5:fa:c5:43:
                    42:5e:0a:7a:91:02:ef:71:3a:31:3a:11:7b:26:96:
                    d9:f8:31:dc:0d:fe:4b:9e:da:e1:4f:7d:2f:c4:e8:
                    47:b3:c2:6d:a5:14:9f:e6:8f:c8:d8:84:88:17:c6:
                    a7:61:83:4f:0f:1d:a2:e6:61:12:c9:97:92:ae:d9:
                    00:11:ed:4f:18:93:45:d2:85:57:9a:19:c2:9a:a7:
                    74:c7:40:44:4c:e0:95:c6:b3:78:01:cf:87:43:72:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:78:49:B0:E8:FD:99:7F:21:C7:8B:84:8F:C3:C2:D8:9D:CE:78:9D
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:35:6a:44:f1:39:2a:49:2b:48:e7:5a:a9:c8:97:96:c1:91:
         41:26:d4:47:eb:86:55:e8:7e:f7:8a:d2:c6:cd:6c:9d:bd:96:
         26:72:69:2d:73:1f:d4:10:92:75:89:04:90:ba:d6:07:b7:3e:
         22:d0:52:3f:ed:18:b6:99:f8:e6:9c:09:c1:c8:f1:fd:65:f6:
         a1:28:42:5c:d3:eb:dc:28:8f:c8:15:a6:09:26:32:f9:ef:27:
         a8:39:b4:c3:42:66:6a:2e:3e:55:1c:0d:43:73:ea:22:2a:82:
         d9:c1:a0:fd:24:2f:1d:63:cb:d4:7b:7e:24:e4:f6:58:fd:96:
         b1:0b:f7:1a:4b:cb:dd:4c:a4:4b:36:32:44:2a:09:fb:21:b0:
         fb:4a:41:5c:12:99:3e:6b:39:fd:88:86:40:8c:fa:58:af:fe:
         a0:47:d6:ca:0b:5f:af:19:d1:ae:66:b8:78:90:6e:e4:13:be:
         74:fa:2b:51:c9:5c:bf:0c:bb:6c:e7:cf:e6:8e:9e:0e:66:ec:
         65:0d:10:dd:d7:35:a4:a9:59:44:5d:8a:7b:8a:38:a3:28:ab:
         ad:6c:64:2e:f1:50:df:6a:14:54:07:b6:59:31:d9:b1:89:e6:
         ef:b2:30:58:0c:79:20:92:7a:f7:90:40:16:f9:06:f0:61:ed:
         7d:cc:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:10 2025 by rpki-client